
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
</head>
<body>
  <div class="mermaid">
  graph TD
A --&gt; B["&lt;a href='javascript#9;t#colon;alert(document.location)'&gt;AAA&lt;/a&gt;"]
  </div>
<script src="./mermaid.js"></script>
 <script>mermaid.initialize({ startOnLoad: true });
</script>
</body>
</html>